From: Harberson, Kimberly A. (CYD) (FBI) <Kimberly Harberson@ic.fbi.gov> 


Sent: Tuesday, June 14, 2016 2:13 PM 

To: Shawn Henry <shawn@crowdstrike.com>; Sussmann, Michael A. (Perkins Coie) 
<MSussmann@perkinscoie.com> 

Ce: Sporre, Eric W. (CYD) (FBD <Eric.Sporre@ic.fbi.gov>; Kelly, Jordan R. (CYD) (FBD 


<Jordan.Kelly@ic.fbi.gov>; Trainor, James C. (CYD) (FBI) 
<James. Trainor@ic.fbi.gov> 


Subject: RE: [Suspect] Intro 


Good afternoon, Mr. Henry- 


That’s perfect. Let’s plan for Thursday, 6/16 from 3:00 p.m. — 4:00 p.m. here at FBI HQ. If that time is agreeable for the 
group, | will send out a calendar invite. Please feel free to contact me should you have any questions. 


Thank you, 


Kim Harberson 

Executive Assistant to Assistant Director Trainor 
FBI Cyber Division 

(202) 324-7770 | desk 

RNG 2666 | cell 

Kimberly. Harberson @ic.fbi.gov 


From: Shawn Henry [mailto:shawn@crowdstrike.com] 

Sent: Tuesday, June 14, 2016 10:33 AM 

To: Harberson, Kimberly A. (CYD) (FBI); Sussmann, Michael A. (Perkins Coie) 

Cc: Sporre, Eric W. (CYD) (FBI); Kelly, Jordan R. (CYD) (FBI); Trainor, James C. (CYD) (FBI) 
Subject: [Suspect] Re: [Suspect] Intro 


Hi Kimberly, 
Does Jim have any availability on Thursday? | am available to come to HQ between 2p-5p, as is Mr. Sussman. Thx....SH 


Shawn Henry 

President, CrowdStrike Services 
CSO, CrowdStrike Inc. 
REDACTEDEL ZIG) 


From: "Harberson, Kimberly A. (CYD) (FBI)" <Kimberly.Harberson@ic.fbi.gov> 

Date: Monday, June 13, 2016 at 4:30 PM 

To: "Sussmann, Michael A. (Perkins Coie)" <MSussmann@perkinscoie.com> 

Cc: "Sporre, Eric W. (CYD) (FBI)" <Eric.Sporre@ic.fbi.gov>, "Kelly, Jordan R. (CYD) (FBI)" <Jordan.Kelly @ic.fbi.gov>, 
"Trainor, James C. (CYD) (FBI)" <James.Trainor@ic.fbi.gov>, Shawn Henry <shawn @crowdstrike.com> 

Subject: RE: [Suspect] Intro 


Good afternoon, Mr. Sussmann- 


Thank you for your email. Perhaps we could plan for a meeting this Friday, 6/17 from 3:00 p.m. — 4:00 p.m. here at FBI 


SCO-011890 


No. 1:21-cr-00582-CRC (D.D.C.) DX-818 0001 


HQ. When you have a moment, could you please confirm your availability? 

Mr. Henry, will that day and time work in your schedule as well? 

Feel free to contact me should you have any questions. | can be reached at (202) 324-7770. 
Thank you, 


Kim Harberson 

Executive Assistant to Assistant Director Trainor 
FBI Cyber Division 

(202) 324-7770 | desk 


RGN 2666 | cell 


Kimberly.Harberson@ic.fbi.gov 


From: Sussmann, Michael A. (Perkins Coie) [mailto:MSussmann@perkinscoie.com] 

Sent: Monday, June 13, 2016 1:03 PM 

To: Harberson, Kimberly A. (CYD) (FBI) 

Cc: Sporre, Eric W. (CYD) (FBI); Kelly, Jordan R. (CYD) (FBI); Trainor, James C. (CYD) (FBI); Shawn Henry 
Subject: Re: [Suspect] Intro 


Kim, 


My client and | can meet between 3:00 and 6:00 pm on Thursday or Friday. (Shawn will let you know his 
availability separately.) 


We can meet at FBI HQ or | can host at my office, which is at 13th & G Street, NW. (If at HO, I can badge-in to the 
building but I’ll have one person with me from the client who you will need to clear.) Please pick whichever 
location is more convenient for your folks and let us know. 


Thanks, 
Michael 


Michael Sussmann | Perkins Coie LLP 
P: 202.654.6333 
www .perkinscoie.com/msussmann 


From: Jim Trainor <james.trainor @ic.fbi.gov> 

Date: Monday, June 13, 2016 at 12:21 PM 

To: Shawn Henry <shawn@crowdstrike.com>, Michael <msussmann@perkinscoie.com> 

Ce: "Harberson, Kimberly A. (CYD) (FBI)" <Kimberly. Harberson@ic.fbi.gov>, "Sporre, Eric W. (CYD) (FBI)" 


<Eric.Sporre@ic.fbi.gov>, "Kelly, Jordan R. (CYD) (FBI)" <Jordan.Kelly@ic.fbi.gov> 
Subject: RE: [Suspect] Intro 


Thanks Sean. I've cc my Executive Assistant Kim Harberson on this email and she will contact Mike and yourself on scheduling 
a time to meet up in person on Thu/Fri. | can have WFO present as well as the team from Hq that is handling this particular 
threat. Feel free to shoot us some tines that would work best for you guys. 


Jim 


Jim Trainor 


SCO-011891 


No. 1:21-cr-00582-CRC (D.D.C.) DX-818 0002 


Assistant Director 
FBI Cyber Division 
202-324-7770 (O) 
E15 39 (C) 


-------- Original message -------- 
From: Shawn Henry <shawn@crowdstrike.com> 
Date: 06/13/2016 12:13 PM (GMT-05:00) 


To: MSussmann@perkinscoie.com, "Trainor, James C. (CYD) (FBI)" <James.Trainor@ic.fbi.gov> 
Subject: [Suspect] Intro 


Thx for the call today. | think everyone has the same goal in mind...protection of our critical infrastructure from sophisticated 
adversaries, and for that I'm grateful. 


Providing mobile numbers for you both. Thx, very much appreciated. SH 


Jim Trainor- RENEE 1539 
Michael Sussman +REA 9998 


Sent from my iPhone 

This message has failed Internet mail authentication checks and is considered suspicious. The sender information may be spoofed or 
this possibly could be a false positive identification. Prior to acting on the contents of the message, recipients may want to 
determine whether the sender is valid through other means. 


NOTICE: This communication may contain privileged or other confidential information. If you have received it in error, please advise the sender by reply email and 
immediately delete the message and any attachments without copying or disclosing the contents. Thank you. 


This message has failed Internet mail authentication checks and is considered suspicious. The sender information may be 
spoofed or this possibly could be a false positive identification. Prior to acting on the contents of the message, recipients may 
want to determine whether the sender is valid through other means. 


SCO-011892 


No. 1:21-cr-00582-CRC (D.D.C.) DX-818 0003 


